Necurs botnet abuses Microsoft Publisher file format to deliver FlawedAmmyy RAT to bank employees

A pair of Necurs botnet-fueled phishing campaigns were found targeting the banking industry this month, using Microsoft Publisher (.pub) file attachments to drop the FlawedAmmyy remote access trojan.